apache/dolphinscheduler
[DSIP-36][Dependency] Upgrading dependent component versions
オープン
#15,940 opened on 2024/04/29
DSIPhelp wantedpriority:high
Repository metrics
- Stars
- (11,659 個のスター)
- PR merge metrics
- (PR metrics pending)
説明
Search before asking
- I had searched in the DSIP and found no similar DSIP.
Motivation
There are a lot of dependencies in DS that have CVE, we need to upgrade these versions, otherwise there will be security issues
Design Detail
We need to find safe versions, preferably a compatible one, and upgrade.
Compatibility, Deprecation, and Migration Plan
Should ve Compatibility.
Test Plan
Test by UT/E2E.
Code of Conduct
- I agree to follow this project's Code of Conduct